Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1cb40cd7-05f4-39ab-a106-0911f4aeff75.roa
File:                     1cb40cd7-05f4-39ab-a106-0911f4aeff75.roa (raw, json)
Hash identifier:          aTVarnGYjKejeEvVc1tl8D4DTVHKSEhBcrUhJcNzNwA=
Subject key identifier:   8F:71:DE:3F:FE:54:11:14:3A:FE:37:64:2A:12:F5:A1:81:22:E6:69
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584D3DFFFABBABE48E8D96DC6240
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1cb40cd7-05f4-39ab-a106-0911f4aeff75.roa
Signing time:             Sat 21 Mar 2026 13:00:39 +0000
ROA not before:           Sat 21 Mar 2026 13:00:39 +0000
ROA not after:            Fri 19 Jun 2026 13:00:39 +0000
asID:                     33363
IP address blocks:        2605:a401:83b6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 28 Mar 2026 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4d:3d:ff:fa:bb:ab:e4:8e:8d:96:dc:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Mar 21 13:00:39 2026 GMT
            Not After : Jun 19 13:00:39 2026 GMT
        Subject: CN=99bd172f-d75e-4c96-86c2-f1f4633ba952
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:99:6a:50:e1:86:70:e1:49:5d:36:fe:45:8d:
                    63:1d:45:48:ac:9b:33:64:a1:28:b6:33:2c:f2:8b:
                    94:24:59:9a:30:c6:44:67:e9:28:84:42:f4:52:1b:
                    61:b9:09:bc:fd:9c:40:5d:30:a3:45:63:80:02:8f:
                    70:ae:94:8f:b8:86:16:bb:62:61:9f:d7:4b:f9:19:
                    64:0e:b9:3d:a4:db:9d:14:10:3b:d3:01:05:cb:f7:
                    38:76:d9:02:b4:31:74:c7:d3:85:41:86:dd:65:4a:
                    72:9c:fa:3f:48:c2:fa:e2:3d:df:26:b3:72:44:58:
                    6c:ca:c7:c9:1f:78:e9:57:ce:1f:09:75:a0:32:0c:
                    25:07:bb:07:ec:f6:1a:30:a6:cf:eb:e5:ac:35:87:
                    be:98:d2:bb:30:37:9e:73:95:cb:99:6a:8e:90:db:
                    61:01:54:d5:2d:2e:33:ca:3d:d9:2e:88:6b:0b:4d:
                    ea:7b:18:08:f3:2b:27:ca:11:77:8c:66:33:1f:cb:
                    ed:7a:be:92:45:3f:12:3e:d4:fa:17:78:4b:a9:7d:
                    68:91:2e:57:57:eb:7a:93:52:d0:4f:bd:fc:f1:da:
                    b3:75:b8:9f:63:6c:df:0c:40:52:bf:98:d9:ae:f6:
                    7f:e1:28:76:78:55:ea:e4:c1:38:2d:2e:dc:16:31:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:71:DE:3F:FE:54:11:14:3A:FE:37:64:2A:12:F5:A1:81:22:E6:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/1cb40cd7-05f4-39ab-a106-0911f4aeff75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:a401:83b6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:d5:f6:e1:f0:da:3e:30:a8:28:5f:b6:90:70:9c:05:91:a5:
         1e:26:d8:0d:6a:ac:6f:f5:a1:b2:78:b2:f1:91:e2:e9:0a:e0:
         43:3b:3a:11:b6:e1:35:35:8f:da:22:35:00:fb:5a:e8:3d:e6:
         a2:4d:a6:93:7d:bc:c0:4e:68:53:9c:b5:df:67:bc:39:1b:c5:
         2e:ca:c8:b1:7e:ec:93:2f:be:aa:c3:7d:df:e8:ca:c4:d8:1e:
         ff:66:b7:79:c2:c2:fb:3f:ba:0d:b6:af:bb:d8:b4:40:44:89:
         36:7f:a3:b5:ad:40:4c:c8:96:37:24:ad:1f:27:2f:d8:b6:00:
         e6:3f:5d:01:9b:46:fb:ff:d4:73:41:49:d2:33:56:5e:d3:53:
         df:cc:36:70:79:5a:fd:6f:6f:d7:ad:52:ae:da:a2:ac:dd:c8:
         43:8c:2e:c1:b5:1f:e0:b0:f8:70:b8:04:a7:4c:f8:4e:15:c7:
         77:58:fd:c2:ba:87:f0:fb:27:fe:17:9b:d4:0f:b5:4b:43:c1:
         40:21:7d:83:79:7e:f6:25:5e:c3:50:fe:ef:18:c1:bb:d8:e6:
         8a:8e:ef:7c:13:af:10:c1:8d:17:e2:a1:28:6a:ee:65:3b:43:
         a9:34:35:cf:21:f0:24:9b:1d:25:8c:74:c4:18:c5:67:2a:b5:
         9a:f3:e2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:41:03 2026 by rpki-client